Engineering topics

Culler, Megan Jordan

Publications and source records attributed to Culler, Megan Jordan.

At least 19 records

DOE OSTI2024

Battery Energy Storage Systems Report

Battery energy storage systems (BESS) are a critical component of grid reliability and resilience today, providing rapid response capabilities while enabling grid modernization and capacity expansion across the United States. As utilities, communities, and customers prepare to deploy significant BESS capacity over the next several years, the United States has an opportunity to build security into battery system design and deployments. This report provides a framework for assessing the current dominance of foreign-manufactured components in the supply chains for BESS, inverter-based resources, and transformers. It offers high-impact, actionable solutions to service partners, industry, and government to address supply chain risks for currently installed, in design, and future deployments.

24 - POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2024

Organizational Influence on Supply Chain for Digital Energy Infrastructure: Business Models, and Policy Landscape

Significant investment is driving the essential modernization and digitization of U.S. energy infrastructure, but the United States faces a key challenge in this grid transformation: our renewable and clean energy supply chains have limited capacity to source necessary digital assets through U.S. or allied sources. Batteries and their associated power electronic interfaces are key components to delivering clean and more resilient energy delivery, providing much-needed fast ramping, emergency discharge, generation, and operations support to the electric grid. These services have grown to be invaluable over the past 10 years and will soon be an irreplaceable component of energy delivery. While there have been significant strides to move supply chains for raw and critical materials to U.S. and allied nations, the control and power electronic industry has lagged, in part because of lower cost margins. For example, the United States now has growing capacity to manufacture solar photovoltaic (PV) panels, but 90% of the inverters—which are essential to the conversion of DC to AC for grid connection and controls—are made in or source parts from the People’s Republic of China (PRC). While a global supply chain is beneficial for many economic and supply diversification reasons, presence of foreign entities of concern (FEOC) in a dominant role in this supply chain brings additional concerns for national security of infrastructure. The BESS relationship and new clean energy have features that warrant discussions and additional focus on impact for technology security, given their critical role. This review considers the impact and solutions for complex business and policy landscapes in clean energy supply chain, and the benefit trade-offs, focusing on the Battery Energy Storage System case study, and its complex organizational relationships across both the US, Allied countries and Foreign Entities of Concern. While many examples in this paper are presented on PRC focused manufacture, this could apply to any potentially adversarial relationship

25 - ENERGY STORAGE↗

DOE OSTI2024

Cyber Threat Assessment of Solar PV Energy

This presentation discusses cyber threats to solar energy systems. Through a discussion of the cyber risk elements of threat, vulnerability, and consequence, we present examples of these risks in the solar industry. Then, we present 8 real-world events from the last 5 years that have affected the solar industry or solar companies.

14 SOLAR ENERGY↗

DOE OSTI2024

Distributed Wind Hybrid Energy Systems for Rural Applications

Distributed-wind-based hybrid energy systems can smooth the power output from renewable energy resources. The number of these systems is growing because of their ability to contribute to local energy and resilience needs. Distributed wind hybrid systems offer major benefits for industrial loads, including enhanced energy reliability, cost efficiency, and sustainability. This fact sheet describes those benefits and considerations in detail.

14 SOLAR ENERGY↗

DOE OSTI2024

Securing Digital Energy Infrastructure: Procurement, Contracting, and Supply Chain Risk Management Guidance

Recognizing the scale of this industry challenge, the United States (U.S.) Department of Energy (DOE) Grid Deployment Office (GDO) and Cybersecurity Energy Security & Emergency Response office have launched a multi-year BESS supply chain security initiative to identify consequence-driven approaches to addressing BESS supply chain security and provide resources to support prioritization of supply chain security efforts associated with the procurement of BESS equipment and services. This guide is one element of the supporting resources to be provided and sets forth a framework and guidance for procurement bidding, selection, risk analysis, and agreements stakeholders can implement to mitigate cybersecurity risks across the entirety of battery system component ecosystem, including the interconnected software and hardware required for control and monitoring BESSs.

25 ENERGY STORAGE↗

DOE OSTI2024

Risk Analysis for Remote Operation of Microreactors

Microreactors are a subset of advanced nuclear reactors that can be factory fabricated, transportable, and self-regulating. They have the potential to be used in microgrids, rural and remote areas, or emergency response applications, replacing fossil fuel sources like diesel generators and enabling sustainable energy generation. In order to make microreactor operation cost-effective, it is likely that remote communications will be needed to reduce the number of personnel required to be on site. While remote operation of energy generation and other industrial control systems is common in other industries, it is not yet adopted in the nuclear community and has many perceived and actual risks. In this paper, the severity of the risks introduced by remote operations for microreactors are explored. The primary changes in the operations involve the addition of a remote communications network and a certification system for data and controls. These changes lend themselves to considerations of cyber risks, whether unintentional or adversarial, but the assessment considers not just cyber risks introduced, but also how physical and human factors-based risks will impact the remote operations system and change the overall risk profile. This initial assessment indicates that there are standard cyber and mitigation measures that can be put in place so the risk of doing remote operations does not dramatically increase compared to local operations. This evaluation is a critical step in the process of evaluating if remote operations of microreactors is a suitable solution to meet future sustainable grid needs

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

DOE OSTI2024

Assessment and Coordination of DER Cybersecurity Standards

Distributed energy resources (DERs) are becoming increasingly important to the electric grid, including solar energy systems. However, DERs also introduce new cybersecurity risks, including those posed by cloud computing. Standards harmonization is essential for ensuring that DERs are secure and can be safely integrated into the grid. This panel will discuss cyber standards harmonization for solar security. The panel will feature experts from the S2G Program, National Labs and Industry.

14 SOLAR ENERGY↗

DOE OSTI2024

Application Guide for the Cyber-Resilient Design Framework for Hybrid Systems

As the energy landscape evolves, hybrid power plants—integrating multiple renewable energy sources (e.g., solar, wind, and battery storage) with the bulk power electric system—play a crucial role in meeting growing energy demands. However, with a hybrid power plant’s increased number of components, complex network connectivity and digitization of controls, these systems face growing cybersecurity risks. To help mitigate these risks, Idaho National Laboratory (INL) presents this application guide specifically designed for operators and systems engineers to evaluate the cybersecurity resilience of their hybrid power plant’s design.

14 SOLAR ENERGY↗

DOE OSTI2024

Does practice make perfect? Lessons learned from full-scale power system incident response exercise

While threats to the energy sector occur daily, few utilities get the opportunity to fully test out their detection and response mechanisms to advanced threats in the real world. With the high demand for reliability, few grid operators would allow execution of simulated cyber-attacks on their live systems. The DOE-funded Liberty Eclipse project offers a unique opportunity for small and large utilities and coops to practice their combined IT/OT responses to a live red team executing attacks against an isolated power system on an island in New York. Both cyber teams and power operations teams must work together to detect and respond to attacks, even restoring the power system against extreme impacts. Lessons learned from these exercises reveal key takeaways for understanding what a real attack against the electric sector will look like, gaps in execution of the best-laid plans when the pressure of a real event is bearing down, and how organizations can better prepare for advanced attacks by optimizing participation in exercises. This presentation will discuss successes and opportunities for improvement both in how utilities can prepare for and respond to events, as well as how full-scale IT/OT exercises can be coordinated.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2024

Developing a Supply Chain Security Program

Amid growing concerns over foreign manufacturing for components and devices deployed in critical energy infrastructure, this research from the national labs will highlight best practices for developing and maintaining a supply chain security program. Tools for asset inventory, tips for developing and maintaining software- and hardware-bills-of-materials (SBOMs and HBOMs), recommended contractual language for vendor agreements, and identification of responsibilities will be shared. We discuss the one-time requirements to enable a successful supply chain security program and the best ways to operationalize this program for maximum impact, including development of robust practices for vulnerability tracking, patch management, and workarounds, with understanding of the reliability and uptime requirements for utilities. The recommendations shared are based on a cyber-informed engineering approach to identification of high-consequence impacts and the engineering controls related to supply chain management that can best mitigate these impacts. This approach allows for prioritization of resources. Additionally, we highlight relative up-front and ongoing costs associated with recommended controls. Viewers will leave with an understanding what a supply chain security program is, and what steps, prioritized for resource-constrained organizations, can build a robust program.

14 SOLAR ENERGY↗

DOE OSTI2024

Trends in Cybersecurity Threats to Clean Energy

As deployments of clean energy generation and storage assets continue to grow, the increased attack surface creates a greater risk for cyber threats, but is clean energy truly a target for cyber adversaries? This poster will present research on the trends in cyber incidents that have affected clean energy companies and assets as well as the trends in disclosed and exploited vulnerabilities. From a series of ransomware attacks on European wind manufacturers, to vulnerabilities exploited in solar assets to turn controllers into botnets, to attacks on communication infrastructure that have resulted in extended outages of remote control and monitoring, we explore the techniques used and the impacts to the clean energy sector. Key takeaways include understanding of how OT-focused malware is becoming more flexible and more destructive, how known vulnerabilities are being exploited, the growing number of IT and OT attacks that use built in tools and functionalities. Additionally, we highlight the presumed motivations and targeted sectors for various identified cyber adversaries. Viewers will leave with an understanding of how recent headlines fit into the development of cyberattack trends and what preventions they may need to take to protect against increasingly popular tactics.

14 SOLAR ENERGY↗

DOE OSTI2024

Distributed Wind for Commercial Loads

Distributed wind can help meet on site energy and resilience needs for a wide variety of commercial loads .While it is a variable resource, it has predictable daily and annual production trends. The presence of on-site renewable generation can enhance resilience, supplying power for long periods of time without worrying about conserving fuel supply. The addition of properly sized storage or complementary solar resources can further reduce the challenges of intermittency and reduce the need for fuel-limited backup power during outage situations. This fact sheet explores further the energy and resilience requirements of commercial loads and how distributed wind may be a good match to meet their load needs.

20 FOSSIL-FUELED POWER PLANTS↗

DOE OSTI2024

Distributed Wind for Industrial Loads

Industrial loads have significant energy resilience requirements, which is one reason distributed wind may be a good option to help provide generation for these facilities. This fact sheet provides an overview of industrial load energy and resilience needs, and discusses why distributed wind may be a good option to provide onsite power for these facilities.

17 WIND ENERGY↗

DOE OSTI2024

Threats to DERs and Tools to Mitigate Them

As the pace of renewable energy development increases, so does the challenge and opportunity to develop innovative solutions to secure renewable technologies. Four national laboratories National Renewable Energy Laboratory, Sandia National Laboratories, Pacific Northwest National Laboratory, and Idaho National Laboratory are working together to increase cybersecurity maturity levels for solar stakeholders. INL will discuss a DER threat briefing and operator tools and training developed under the Securing Solar for the Grid (S2G) project.

14 SOLAR ENERGY↗

DOE OSTI2024

Cybersecurity Considerations for Emerging Energy Technologies

AI, cloud computing, post-quantum cryptography, zero-trust architectures, microgrids, and virtual power plants. What do these things have in common? They are all emerging technologies in the clean energy space that will be a critical part of grid modernization efforts. As we work towards clean energy and decarbonization targets, these technologies, developed to solve real-world problems, will help us reach goals and achieve new efficiencies as the paradigm of grid operation shifts. However, there are growing concerns about the cybersecurity risks associated with these trending topics as they are used in critical infrastructure applications. This talk will cover gaps, challenges, and opportunities for the secure implementation of grid modernization solutions and novel energy applications of state-of-the-art networking and communications. Proactive risk mitigation strategies, including the application of cyber-informed engineering, will be discussed. Practical applications of these techniques will help provide countermeasures to the impact of cyberattacks on critical infrastructure technologies in a new, digitized grid landscape.

14 SOLAR ENERGY↗

DOE OSTI2024

Securing Solar for the Grid (S2G): SETO Peer Review

In this session at the SETO Peer Review, several solar cybersecurity projects will be discussed. INL will provide an overview of the multi-lab Securing Solar for the Grid (S2G) project. We will highlight the focus areas of standards development and best practices, cybersecurity tool kits and supply chain analysis, and education and workforce development.

14 SOLAR ENERGY↗

DOE OSTI2024

Cybersecurity for Clean Energy Resources [Slides]

This presentation provides motivation for research in clean energy cybersecurity and highlights INL projects and capabilities to address clean energy cybersecurity needs. The projects are broken down by device level, plant level, utility level, regulation level, and implementation. This introduction to INL capabilities creates opportunity for further conversations around how cohort members can improve their own organizational security postures.

14 SOLAR ENERGY↗

DOE OSTI2024

Distributed Wind for Commercial Loads

20 FOSSIL-FUELED POWER PLANTS↗